Red Hat Security Advisory

RHSA-2025:4658

libtiff security update

Released 2025-05-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) libtiff-4.0.9-34.el8_10, libtiff-devel-4.0.9-34.el8_10
Red Hat Enterprise Linux CRB (v. 8) libtiff-tools-4.0.9-34.el8_10

Fixes 1 record

TI-2017-12547 CVE-2017-17095 · GHSA-v9h2-67w5-wp47

tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of…

MEDIUM 51

tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.10639 Published 2017-12-02 Partial fix CWE-119